@qmuse/qmuse-cli 1.0.3-dev.2 → 1.0.3-dev.4

package/dist/cli.js

@@ -21,6 +21,7 @@ import { clearPendingImport, completeManagedImport, loadManagedProject, saveMana
 import { clearImportFailureDiagnostic, writeImportFailureDiagnostic, } from './import/diagnostic.js';
 import { checkCloudInit, CLOUD_INIT_SUCCESS_MESSAGE } from './cloud.js';
 import { QMUSE_CLI_VERSION } from './version.js';
+import { startUpdateNotice } from './update-notice.js';
 import { startDevelopment } from './dev/index.js';
 // ---------------- 参数解析 ----------------
 const BOOL_FLAGS = new Set([
@@ -727,6 +728,11 @@ async function main() {
         return;
     }
     const root = command[0];
+    const finishUpdateNotice = startUpdateNotice({
+        enabled: root === 'import' && process.stderr.isTTY === true && flags['--json'] !== true,
+        notify: message => process.stderr.write(`${message}\n`),
+    });
+    process.once('exit', finishUpdateNotice);
     try {
         switch (root) {
             case 'whoami':
@@ -761,8 +767,13 @@ async function main() {
         }
     }
     catch (err) {
+        finishUpdateNotice();
         const msg = err instanceof Error ? err.message : String(err);
         fail(msg);
     }
+    finally {
+        finishUpdateNotice();
+        process.off('exit', finishUpdateNotice);
+    }
 }
 main();

package/dist/import/api.js

@@ -1,7 +1,9 @@
 import { openAsBlob } from 'node:fs';
 import { apiCall, authHeaders, buildUrl, requestSourceHeaders, } from '../client.js';
+import { assertImportArchiveSize } from './limits.js';
 export async function uploadImportArchive(input, cfg) {
     const archive = await openAsBlob(input.filePath, { type: 'application/zip' });
+    assertImportArchiveSize(archive.size);
     const headers = authHeaders(cfg);
     headers['Content-Type'] = 'application/zip';
     headers['Content-Length'] = String(archive.size);
@@ -18,20 +20,51 @@ export async function uploadImportArchive(input, cfg) {
     catch (error) {
         throw new Error(`上传源码失败：${error instanceof Error ? error.message : String(error)}`);
     }
-    let result;
+    const contentType = response.headers.get('content-type')?.split(';')[0].trim();
+    const traceId = response.headers.get('x-trace-id') ?? response.headers.get('trace-id');
+    const details = [
+        `HTTP ${response.status}`,
+        `源码包 ${(archive.size / 1024 / 1024).toFixed(2)} MiB（${archive.size} 字节）`,
+        contentType && /^[a-z0-9!#$&^_.+-]+\/[a-z0-9!#$&^_.+-]+$/iu.test(contentType)
+            ? `响应类型 ${contentType}` : undefined,
+        traceId && /^[a-z0-9_-]{1,128}$/iu.test(traceId) ? `traceId=${traceId}` : undefined,
+    ].filter(Boolean).join('，');
+    if (response.status === 413) {
+        await response.body?.cancel().catch(() => undefined);
+        throw new Error(`上传源码失败：源码包超过上传入口大小限制（${details}）。请将不参与运行的生成产物加入 .gitignore 后重试；如需上传完整源码包，请联系平台核对上传限制。`);
+    }
+    let payload;
     try {
-        result = await response.json();
+        payload = await response.json();
     }
     catch {
-        throw new Error('上传源码失败：服务端响应格式错误');
+        throw new Error(`上传源码失败：无法读取有效的 JSON 响应（${details}），请检查服务或网关响应后重试`);
+    }
+    if (!payload || typeof payload !== 'object' || Array.isArray(payload)) {
+        throw new Error(`上传源码失败：服务端响应结构错误（${details}）`);
     }
-    if (!response.ok || result.success !== true || !result.data?.sourceToken) {
-        throw new Error(`上传源码失败：${result.errorMessage ?? result.errorCode ?? `HTTP ${response.status}`}`);
+    const result = payload;
+    if (!response.ok || result.success !== true) {
+        const reason = typeof result.errorMessage === 'string' ? result.errorMessage
+            : typeof result.errorCode === 'string' ? result.errorCode : '服务端拒绝上传';
+        throw new Error(`上传源码失败：${reason}（${details}）`);
+    }
+    if (typeof result.data?.sourceToken !== 'string' || !result.data.sourceToken.trim()) {
+        throw new Error(`上传源码失败：服务端响应缺少有效上传凭证（${details}）`);
     }
     return result.data.sourceToken;
 }
-export function startAppImport(body, cfg) {
-    return apiCall('POST', '/api/app-import/start', body, cfg);
+export async function startAppImport(body, cfg) {
+    const result = await apiCall('POST', '/api/app-import/start', body, cfg);
+    if (!result.ok && result.errorCode === 'APP_IMPORT_VERSION_CONFLICT') {
+        const raw = result.raw;
+        const latest = raw?.error?.latestVersionId;
+        const version = raw?.error?.appId === body.targetAppId &&
+            typeof latest === 'string' && /^[A-Za-z0-9_-]{1,128}$/u.test(latest)
+            ? `（当前平台版本 ${latest}）` : '';
+        result.errorMessage = `应用已产生新版本${version}。请同步最新源码后重新导入；确认以本地源码覆盖时，重新执行 qmuse import . --force。`;
+    }
+    return result;
 }
 export function queryAppImportStatus(jobId, cfg) {
     return apiCall('POST', '/api/app-import/status', { jobId }, cfg);

package/dist/import/archive.js

@@ -4,7 +4,7 @@ import { tmpdir } from 'node:os';
 import path from 'node:path';
 import { ZipFile } from 'yazl';
 import { createSourceManifest, SOURCE_MANIFEST_PATH } from './source-manifest.js';
-const MAX_ARCHIVE_BYTES = 500 * 1024 * 1024;
+import { assertImportArchiveSize } from './limits.js';
 const STABLE_ZIP_MTIME = new Date('1980-01-01T00:00:00.000Z');
 export async function createImportArchive(preflight) {
     const temporaryDirectory = await mkdtemp(path.join(tmpdir(), 'qmuse-import-'));
@@ -36,8 +36,7 @@ export async function createImportArchive(preflight) {
         const sizeBytes = (await stat(filePath)).size;
         if (sizeBytes <= 0)
             throw new Error('生成的源码压缩包为空');
-        if (sizeBytes > MAX_ARCHIVE_BYTES)
-            throw new Error('源码压缩包超过 500MB');
+        assertImportArchiveSize(sizeBytes);
         return {
             filePath,
             fileName,

package/dist/import/limits.js

@@ -0,0 +1,6 @@
+export const MAX_IMPORT_ARCHIVE_BYTES = 10 * 1024 * 1024;
+export function assertImportArchiveSize(sizeBytes) {
+    if (sizeBytes > MAX_IMPORT_ARCHIVE_BYTES) {
+        throw new Error(`源码压缩包超过 10 MiB 上传上限：当前 ${(sizeBytes / 1024 / 1024).toFixed(2)} MiB（${sizeBytes} 字节）。请将不参与运行的生成产物加入 .gitignore 后重试`);
+    }
+}

package/dist/update-notice.js

@@ -0,0 +1,80 @@
+import { readFileSync, mkdirSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import semver from 'semver';
+import { QMUSE_CLI_DISTRIBUTION, QMUSE_CLI_VERSION } from './version.js';
+const CACHE_TTL_MS = 24 * 60 * 60 * 1000;
+export function updateMessage(current, latest, distribution) {
+    if (typeof latest !== 'string' || !semver.valid(latest) || semver.prerelease(latest) ||
+        !semver.valid(current) || !semver.gt(latest, current))
+        return;
+    const command = distribution === 'PUBLIC'
+        ? 'npm install -g @qmuse/qmuse-cli@latest --registry=https://registry.npmjs.org/'
+        : 'tnpm install -g @alipay/qmuse-cli@latest';
+    return `qmuse-cli 有新版本 ${latest}（当前 ${current}）。建议更新：${command}`;
+}
+// Check alongside the command; finishing a command never waits for the registry.
+export function startUpdateNotice(options) {
+    if (!options.enabled)
+        return () => { };
+    const distribution = options.distribution ?? QMUSE_CLI_DISTRIBUTION;
+    const current = options.current ?? QMUSE_CLI_VERSION;
+    const directory = options.cacheDirectory ?? join(homedir(), '.cache', 'qmuse-cli');
+    const cachePath = join(directory, `update-${distribution.toLowerCase()}.json`);
+    const controller = new AbortController();
+    let latest;
+    let finished = false;
+    let cached = false;
+    try {
+        const value = JSON.parse(readFileSync(cachePath, 'utf8'));
+        const age = Date.now() - value.checkedAt;
+        if (Number.isFinite(age) && age >= 0 && age < CACHE_TTL_MS) {
+            latest = value.latest;
+            cached = true;
+        }
+    }
+    catch { /* Missing or corrupt cache must not affect the command. */ }
+    let timer;
+    if (!cached) {
+        timer = setTimeout(() => controller.abort(), 2000);
+        timer.unref();
+        const url = distribution === 'PUBLIC'
+            ? 'https://registry.npmjs.org/@qmuse%2fqmuse-cli/latest'
+            : 'https://registry.antgroup-inc.cn/@alipay%2fqmuse-cli/latest';
+        void (async () => {
+            try {
+                const response = await (options.fetcher ?? fetch)(url, {
+                    signal: controller.signal,
+                    redirect: 'error',
+                    headers: { Accept: 'application/json' },
+                });
+                if (!response.ok)
+                    return;
+                const metadata = await response.json();
+                if (finished || controller.signal.aborted || typeof metadata.version !== 'string' ||
+                    !semver.valid(metadata.version) || semver.prerelease(metadata.version))
+                    return;
+                latest = metadata.version;
+                try {
+                    mkdirSync(directory, { recursive: true, mode: 0o700 });
+                    writeFileSync(cachePath, JSON.stringify({ checkedAt: Date.now(), latest }), { mode: 0o600 });
+                }
+                catch { /* Cache is best effort. */ }
+            }
+            catch { /* Update checks never fail the user's command. */ }
+            finally {
+                clearTimeout(timer);
+            }
+        })();
+    }
+    return () => {
+        if (finished)
+            return;
+        finished = true;
+        clearTimeout(timer);
+        controller.abort();
+        const message = updateMessage(current, latest, distribution);
+        if (message)
+            options.notify(message);
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qmuse/qmuse-cli",
-  "version": "1.0.3-dev.2",
+  "version": "1.0.3-dev.4",
   "description": "将本地 React 项目安全导入 QMuse 的命令行客户端",
   "type": "module",
   "bin": {
@@ -21,6 +21,7 @@
   "dependencies": {
     "@napi-rs/keyring": "2.0.0",
     "ignore": "^7.0.8",
+    "semver": "7.7.4",
     "yazl": "^3.3.1"
   },
   "files": [
@@ -33,6 +34,7 @@
   "devDependencies": {
     "@playwright/test": "1.63.0",
     "@types/node": "^22.10.0",
+    "@types/semver": "7.7.1",
     "@types/yazl": "^3.3.1",
     "tsx": "^4.19.2",
     "typescript": "^5.9.3",